Check_Point
156-115.77 · Question #173
You have configured IPS on your network; you find you are being overwhelmed with what you believe are false positives. You investigated this traffic and confirmed they are false positives. What can…
The correct answer is D. Add an exception for this traffic under the IPS protection. See the full explanation below for the reasoning.
Question
You have configured IPS on your network; you find you are being overwhelmed with what you believe are false positives. You investigated this traffic and confirmed they are false positives. What can you do to stop these IPS alerts?
Options
- ARight click the alert and "ignore"
- BDisable the IPS protection for this network
- CUse a SAM rule to categorize this traffic
- DAdd an exception for this traffic under the IPS protection
How the community answered
(32 responses)- A3% (1)
- B13% (4)
- C6% (2)
- D78% (25)
Community Discussion
No community discussion yet for this question.